News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 3 Feb· 56 articles
-
The “Unstoppable” PC: Why Microsoft’s Latest Security Update is Refusing to Let Windows 10 Die
On 3 February 2026, SecurityOnline[.]info notes that Microsoft’s January cumulative updates for Windows 11 sparked a string of technical issues, including devices failing to enter a proper sleep state or shutting down correctly. According to Microsoft, these…
SecurityOnline -
The “Vibe Coding” Disaster: How a Simple Bug Exposed 4.75 Million Records on the AI Social Network Moltbook
The article details how Moltbook, an AI-focused social network, faced a breach after a simple bug exposed 4.75 million records, including 1.5 million API authorization tokens, over 35,000 human email addresses and 29,000 early-registration emails.…
SecurityOnline -
The “Unbreakable” Seal Broken: Microsoft Finally Ends the Forced Reinstall for Smart App Control
The article notes that Smart App Control (SAC) sits among a range of defensive measures in Windows 11 and has long operated only within a pristine system environment to block untrusted software. It explains that if SAC is deactivated, the system was…
SecurityOnline -
Admins Only: Microsoft’s New Windows 11 Update Quietly Locks Down Storage Settings
Microsoft has introduced a new security feature in Windows 11 that restricts non-administrative users from accessing the Storage Settings area, which includes Storage Sense, cleanup recommendations, backup protocols, storage spaces, and disk and volume…
SecurityOnline -
The “Go Client” Trap: Why Your RustDesk ID is Currently Under Automated Botnet Siege
The Go Client trap targets the popular open-source remote access tool RustDesk, which was besieged in late January 2026 by an automated campaign orchestrated by a sprawling botnet. According to the report, the attack relies not on software vulnerabilities…
SecurityOnline -
2nm Power Shift: Samsung’s Exynos 2600 Rivals Snapdragon in New Galaxy S26 Leaks
On 3 February 2026, leaks surrounding Samsung’s Galaxy S26 suggest the Exynos 2600, manufactured on a 2nm GAA node, will rival Qualcomm’s Snapdragon 8 Elite Gen 5 in the Korean market and beyond. Geekbench 6 telemetry shows the Exynos 2600-equipped Galaxy…
SecurityOnline -
Grid Sabotage: “Static Tundra” Hits Poland’s Energy Sector with DynoWiper
Poland’s energy sector came under sustained cyber sabotage in late 2025, with CERT Polska detailing coordinated attacks on renewable facilities, a large CHP plant and a manufacturing company linked to the sector. The operation marks a shift from espionage to…
SecurityOnline -
ASUS Kills “File Shredder” Feature to Fix Critical Flaw
ASUS has issued a mandatory update for its commercial PC line that removes a core security feature rather than patching it, in response to a high-severity vulnerability in the ASUS Business Manager suite. The flaw, tracked as CVE-2025-13348, has a CVSS score…
-
Trojan AI: OpenClaw “Skills” Marketplace Flooded with Malware
VirusTotal has released a report detailing a supply-chain attack targeting OpenClaw (formerly Clawdbot), with attackers flooding the platform’s marketplace with malicious “skills” that masquerade as helpful extensions but act as Trojan horses for malware.…
SecurityOnline -
Hydra Tactics: North Korea’s LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
According to CrowdStrike, one of North Korea’s most aggressive cyber units has evolved into three distinct groups: GOLDEN CHOLLIMA, PRESSURE CHOLLIMA, and a core espionage unit that retains LABYRINTH CHOLLIMA. The restructuring marks a move from a monolithic…
SecurityOnline -
Fancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
The article reports that the Russia-linked threat group APT28 (Fancy Bear) has resurfaced with a campaign named Operation Neusploit, targeting Central and Eastern Europe, including Ukraine, Slovakia and Romania. According to Zscaler ThreatLabz, the operation…
-
WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
Hikvision has rolled out a critical firmware update for its DS-3WAP wireless access points to close a high-severity vulnerability that could allow attackers to hijack devices from the inside. The flaw, tracked as CVE-2026-0709, carries a CVSS score of 7.2…
-
Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
According to the Cybersecurity and Infrastructure Security Agency (CISA), a high‑priority alert has been issued for a maximum‑severity vulnerability in KiloView encoders, CVE‑2026‑1453, with a CVSS score of 9.8. The flaw stems from missing authentication for…
SecurityOnline -
AI-Coded Oppression: “RedKitten” Malware Targets Iranian Protesters
3 February 2026 saw researchers describe a cyber-espionage campaign dubbed “RedKitten” that targets Iranian protesters, with HarfangLab noting the operation first observed in early January 2026 and aimed at NGOs and activists documenting the regime’s…
SecurityOnline -
The “IClickFix” Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
The “IClickFix” Trap has turned more than 3,800 WordPress sites into infection points through opportunistic watering hole attacks, according to Sekoia TDR. Since late 2024, the campaign has relied on a deceptive “ClickFix” social engineering tactic,…
SecurityOnline -
Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
The Apache Software Foundation has released crucial security updates for Apache Syncope, addressing two vulnerabilities that could hijack user sessions or leak sensitive server data. The most severe, CVE-2026-23794, is a Reflected Cross-Site Scripting flaw…
